Infosec bits for 2023 week 31
- Cybersecurity News:
- Cyberattacks – South Africa needs an integrated approach to protect critical infrastructure [Adius Ncube, Daily Maverick]
- Humans Unable to Reliably Detect Deepfake Speech [James Coker, Infosecurity Magazine]
- Hacktivists fund their operations using common cybercrime tactics [Bill Toulas, Bleeping Computer]
- How Universities Can Help Support the National Cybersecurity Strategy [Dr Pat Engebretson, Infosecurity Magazine]
- Cybercriminals train AI chatbots for phishing, malware attacks [Bill Toulas, Bleeping Computer]
- Phishing Attacks:
- AI-Enhanced Phishing Driving Ransomware Surge [Kevin Poireault, Infosecurity Magazine]
- Beware of this latest phishing attack disguised as an official Google email [Kurt Knutsson, Fox news]
- Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign [Pierluigi Paganini, SecurityAffairs]
- Russian hackers target govt orgs in Microsoft Teams phishing attacks [Sergiu Gatlan, Bleeping Computer]
- Malware:
- New malware can give a hacker control of your Mac without you realizing it [Roman Loyola, Macworld]
- New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets [THN, The Hacker News]
- Hackers use new malware to breach air-gapped devices in Eastern Europe [Bill Toulas, Bleeping Computer]
- New Reptile Rootkit Malware Attacking Linux Systems Using Port Knocking [Tushar Subhra Dutta, Cyber Security News]
- Vulnerabilities:
- Threat Actors Exploiting Ivanti EPMM Vulnerabilities [CISA, Cybersecurity and Infrastructure Security Agency]
- Dozens of RCE Vulnerabilities Impact Milesight Industrial Router [Ionut Arghire, SecurityWeek]
- Firefox 116 Patches High-Severity Vulnerabilities [Ionut Arghire, SecurityWeek]
- Tooling:
- Open-source penetration testing tool BloodHound CE released [Mirko Zorz, Help Net Security]